So It seems Apple has removed some MDM control of macOS updates in macOS 27 and they are only allowing using DDM commands to do this.Wanting to know if the Defer Major macOS updates MDM profile setting will work in macOS 27 or is this gone too? (I would assume that deferring upgrading to 27 will still work since older versions of the OS still support MDM update control. This is more about the future) I see with Jamf 11.29 that the download & schedule install is now DDM and works on prem but what we are really looking for is a way to continue Defer Major macOS updates for 90 days. We are not in Jamf cloud and not really looking to move.

Just wondering if anyone has any speculation on any announcements at JNUC Keynote this year.  Looking at the session catalog there’s lots on AI, SSO, DDM, Identity management, and OS update management.  The obvious is some announcement on AI but I’ve got nothing specific.I’m interested if anyone else has some speculation.

I just wanted to share some feedback on setting up OIDC SSO with Jumpcloud. While the documentation was pretty good I do find the formatting quite congested, more spacing between steps would be good and not everything I needed wasn’t in the documentation such as the issuer URL which I used Gemini for the answer (https://oauth.id.jumpcloud.com/) if anyone is wanting to know.Other than that it’s all working and I can now get onto setting up blueprints for my devices. https://learn.jamf.com/r/en-US/jamf-account-documentation/JumpCloud 

Hi,i ran into a deadend, where i need your help =) We are currently trying to setup the content cache with parent-child config.A simple ping and netcat are succeeding.I have declared the settings as followed for example:parent: 172.10.10.1child: 20.20.20.1 While reloadSettings it is showing my parent as reloaded. But with “AssetCacheManagerUtil status”i get the output:Parent: (none)i actually cannot get it running.  

Hi Nation,Product Office Hours #6 - OS Readiness and BlueprintsNext session: Thursday, 17th Sep - 9am CDT / 3pm BST / 4pm CESTSpeakers: Katie English, Principal Product Manager and Mark Buffington, Senior Consulting Engineer, Apple TechnologiesRegister here: https://jamf.it/ProductOfficeHours 🧵 Got a question? Drop it in the comments below ahead of time if you want it on our radar, though you don't have to. We'll be taking questions live on the call! Anything we don't get to, we'll follow up right here within 24 hours.See you there!

We have a tech that needs setup to use Jamf Nation with our tenant Caresource. Please let me know if you require any additional information or if there is another way to attach him to the tenant.  Thanks,Nick LumpkinsCaresource

Hi! I need to create a profile that only allows students to access Google Classroom.  This will require also having some web access to finish the login process; has anyone else done this? 

I have created a configuration profile in Jamf Pro for MacBooks that we are deploying as part of a prison education program. Because of the environment, these devices are locked down fairly tightly with several restrictions in place.We have deployed Swift Playgrounds to all of the MacBooks through Jamf, and the application is installing successfully and appearing in the Applications folder. However, when I go to Restrictions > Applications > Allow Apps within the configuration profile, Swift Playgrounds does not appear as an available application to select.Since the application was downloaded through Jamf and successfully pushed to the devices, I am not sure why it is not being recognized in the Allow Apps list.Do you have any suggestions on what I may be missing or how I can get Swift Playgrounds to appear as an available application in the restriction settings?Any advice would be greatly appreciated.

We have been testing 27 beta with every version and I'm not sure why so late in the beta cycle during beta 5 apple decided to add new pop ups. Currently I do not see a way to manage these.  

Is there a way to disable Notification Center completely? Or at least remove the "apps" in NC without students being able to add it back? We use LanSchool; Our math teachers are at a disadvantage since disabling "calculator.app" doesn't disable it in the NC. Restricting "calculator.app" via Jamf doesn't block it in NC, either. We're on macOS High Sierra, and the only thing I have found is the command line below (in quotes). However, I've found that due to Apple's BRILLIANT System Integrity Protection feature, you can't do this. You CAN turn SIP off, which would allow me to run the NC disable command, but can only be done in recovery mode via terminal; which of course, can't be done via Jamf. launchctl unload -w /System/Library/LaunchAgents/com.apple.notificationcenterui.plist killall NotificationCenter Any help would be really appreciated. Link on disabling, but doesn't work with High Sierra: https://gist.github.com/mikermcneil/10005651

Please mark your calendars, our next meetup will be on Thursday, October 29th via Zoom. Topics and presenters TBA at the moment.  Currently targeting 5:30-8:00 PM PDT/MST (6:30-9:00 PM MDT), though that may shift a little depending on our presenters’ needs.  If you register for the meetup, you should get automatic updates as we get the event formalized.Registration is free and as always, everyone is welcome! https://luma.com/txnl8jk8​@JoannaB 

Hi,I have an issue with Beyond Trust Bomgar client on Macs Managed with my Jamf Pro instance.I’ve made a Configuration Profile to allow Bomgar in the privacy settings, my test Mac got the rule but when i want to remote connect to my test Mac, i have to autorise 3 options.I saw many topic about this, but even if i made the same rule, it’s not working.If anyone has an idea? Thank you 

Hey Nation! We’re one week out from JNUC! Registration closes September 17. This is your last chance to be in the room — with the sessions, the labs, and the admins solving the same problems you are.Register now: Register Here!See you in Kansas City!!

Hello fellow Jamf Admins,I would be extremely grateful if anyone has come across this App before (Hospital setting) called, “CBORD Mobile Inventory”. I am trying to add the App Config settings like I’ve done for plenty of our other Apps, but this particular App won’t give me a break. Below is a screen shot of what fields need to be filled out and the App Config I came up with and verified via AI. I am at a loss right now. The last thing we want is for our end-users to have to enter the data manually as that would be a nightmare. Any assistance would be very much appreciated. App Config I’ve tried (certain fields have been changed for obvious reasons). <dict>    <key>serverURL</key>   (<===== I have also tried “APIURL”)    <string>https://netmenu4.cbord.com/NetMenuAPI</string>    <key>appClientId</key>    <string>xxxxxddddfffcxxxxxxxx</string>    <key>region</key>    <string>us-east-1</string>    <key&gt

RSVP Here: https://luma.com/1e1eh23rOctober 15th, online  

East Midlands Apple Admins and MacAdmins Scotland are teaming up for our next meet-up on Tuesday 3 November, from 7:00pm to 9:00pm GMT.Everyone is welcome. If you're involved in supporting, securing, or managing Apple devices, we'd love to have you join us.Register here:https://lnkd.in/eZrmktn2The event will be held online via Zoom, with joining instructions sent to registered attendees nearer the time.We're excited to be joined by speakers from Jamf, Workbrew, and Fleet Device Management, who'll be sharing insights and experiences from the Apple IT and endpoint management world, followed by an open Q&A and community discussion.Please share with colleagues and anyone else who may be interested. We look forward to seeing you there!

Do we need to re-enroll all of our computers to make users MDM capable? 

Today we released Jamf Connect 3.13.0; highlights include:  Changes and ImprovementsCompatibility with macOS 27 Golden Gate To reduce excessive messaging in log files, the logs for Jamf Connect no longer include Wi-Fi interface is undefined and Couldn't retrieve hint of key 'pref.XYZ': -60005 statements. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Would love to connect with anyone going to JNUC next week. If you’re coming (or still on the fence) let me know via email at: tracey.joyce@jamf.com

We have a few iMacs running Sequoia 15.5 and Jamf Connect that are going to black screens after you log in. Both local user accounts and IdP accounts are affected, but I can see the user folder is being created when we log in against our IdP, I get the account creation message but it just hangs on the black screen. Local admin account is having the same problem. I’ve tried uninstalling, restarting, and reinstalling Jamf Connect, but the problem persists. Uninstalling and logging in as a local admin user causes a beach ball to spin, but it sits there and doesn’t not progress. I’ve checked the config profiles and license and they’re all valid, and this isn’t happening fleet wide, just randomly.if I create a new user through Jamf, the user will create, but I can’t log into that account, it immediately dumps me back to the JC login window without any feedback. I can see the new user’s account by running dscl . -list /Users UniqueID but it still hangs. Resetting authchanger doesn’t help eit

Hi Jamf Community,I’m reaching out as a frustrated parent dealing with managed iPads at my son's school, trying to permanently block specific apps like Instagram and Snapchat via Jamf Parent.Unfortunately, I've run into a wall with several limitations and confusing UX choices in the current implementation: Incorrect App Store Categorization: Blocking the "Social Media" category in Jamf Parent does not affect Snapchat or Instagram, as Apple/developers categorize them under "Photo & Video" or "Entertainment". However, Jamf Parent doesn't offer a dedicated "Photo & Video" category filter to toggle off, nor does it allow parents to manually recategorize or target individual apps for permanent restriction. No Permanent Single-App Blocking: In Jamf Parent, restricting individual apps seems strictly tied to a timer mechanism. UX / Translation Issues ("Clear after..."): The option labeled "Clear after [X] hours" is extremely misleading. In the German localized version, it translate

Can someone help me how to block copilot app record option for corporate ios devices, i tried adding xml dictation on device apps> app configuration to block but did not worked 

I really like using Blueprints/DDMs for macOS fleet upgrades. Apple is so close to finally giving us a solid mass update workflow, but in my opinion, two main flaws remain:Users get no clear feedback when an update installation is scheduled. Notifications are way too scarce and easy to miss. Users have even told me they sometimes only see them on the final day.To solve this at my company, I added a live countdown in the menu bar so everyone has a constant reminder that their Mac is scheduled for a restart and update. 48 hours before the deadline, it also sends persistent notifications every two hours, so I can be sure users are properly informed.I know other tools exist for this, but none of them quite hit the mark for me on UI/UX. After two months of fine tuning, the app is out of beta and I'm sharing the source code with the community. While I won't be taking feature requests, I'll do my best to maintain it and fix bugs as long as I'm using it myself.

Hello,I’m looking at deploying Logic Pro to shared/classroom Macs using Jamf Pro and I’m trying to work out the best way to manage the Logic Pro Sound Library for multiple users.My understanding is that newer versions of Logic Pro use a single Logic Pro Library.bundle, which can be relocated to a shared location such as /Users/Shared/ and accessed by multiple macOS users.What I’m trying to establish is:Is the Sound Library installed on a per-user basis by default? If the full Sound Library is downloaded by one user, can other local users access those sounds without downloading them again? What is the recommended way to deploy/configure a shared Logic Pro Sound Library using Jamf Pro? Can the Sound Library download/installation be automated through a Jamf policy or script? Has anyone successfully deployed this configuration to shared Macs in an education environment? If the Logic Pro Library.bundle is moved to /Users/Shared/ can I default Logic Pro to look at this directory for new user

Hi, I’ve notice that since upgrade to macOS 26.6, I sometime get popup window requesting all kind of apps (such as browser) to access the “login” keychain. I dug a little inside the unified logs and saw that Jamf Connect get repeated exception from type “CSSMERR_DL_INVALID_DB_HANDLE”probably when trying to access the keychain. Any chance someone else also encountered this issue ? Thanks  2026-09-13 08:46:17.697211+0300 0x3477 Activity 0x9269f00 1421 0 Jamf Connect: (CFOpenDirectory) Open a given node2026-09-13 08:46:17.698036+0300 0x3477 Activity 0x9269f01 1421 0 Jamf Connect: (CFOpenDirectory) Querying records from directories2026-09-13 08:46:17.698807+0300 0x3477 Activity 0x9269f02 1421 0 Jamf Connect: (CFOpenDirectory) Open a given node2026-09-13 08:46:17.698816+0300 0x3477 Activity 0x9269f03 1421 0 Jamf Connect: (CFOpenDirectory) Querying records from directories2026-09-13 08:46:17.701048+03